Background for the recommendations above — so you understand what the score is measuring, why these four risk areas matter most, and what credible US sources say about the basics.
DefinitionWhat "identity exposure" actually means
Exposure is the surface area a criminal would have to work with if they targeted you tomorrow. It is not a prediction — it is an estimate of how much friction stands between an attacker and a successful account takeover or new-account fraud.
Two people with identical income and credit scores can have very different exposure: one has a credit freeze, hardware-backed 2FA, and a password manager; the other reuses one password across email, banking, and taxes.
FrameworkWhy these four categories
Each category captures a distinct way identity loss actually unfolds:
- Credit-file risk — what a thief can open in your name.
- Digital exposure — what they can hijack that you already own.
- Recovery readiness — how fast you can shut things down if it happens.
- Habit risk — the quiet, daily behavior that decides whether a small breach becomes a months-long cleanup.
SourcesWhat the FTC and CFPB actually recommend
The Federal Trade Commission's IdentityTheft.gov and the Consumer Financial Protection Bureau both center on the same four moves:
- Place a security freeze at all three bureaus.
- Enable two-factor authentication on critical accounts.
- Pull your free reports at AnnualCreditReport.com.
- Act fast on anything unfamiliar.
Paid monitoring is helpful as an early-warning layer — not a substitute for those four.
Each answer contributes points to one or more of four categories. Categories are weighted by how much each one drives actual financial loss in US identity-theft cases: credit-file risk is weighted most heavily, then digital exposure, then recovery readiness, then habit risk. Flags — like recent suspicious activity or an upcoming credit application — can shift you into a higher band even at the same raw score.
The math is deterministic and explainable. The "What's driving your score" section names the specific answers contributing the most points, so you can see exactly where the number came from. Nothing here is opaque, and nothing here is a credit pull.